Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f26ebe9f-58fb-3783-9924-341ab773adc2.roa
File:                     f26ebe9f-58fb-3783-9924-341ab773adc2.roa (raw, json)
Hash identifier:          P+GA+9vFLK+RRMmRK5hg4D2DrfHhGxMeYiohp6P5Xuk=
Subject key identifier:   05:F5:51:0E:FB:E4:A8:32:AE:76:4C:20:A0:47:A0:DB:D7:D4:F5:B7
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583D5BF2AC28FD11AA40C8145000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f26ebe9f-58fb-3783-9924-341ab773adc2.roa
Signing time:             Fri 25 Mar 2022 04:00:00 +0000
ROA not before:           Fri 25 Mar 2022 04:00:00 +0000
ROA not after:            Wed 26 Jun 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.144.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Fri 29 Mar 2024 20:28:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:5b:f2:ac:28:fd:11:aa:40:c8:14:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 25 04:00:00 2022 GMT
            Not After : Jun 26 04:00:00 2024 GMT
        Subject: CN=9c17d260-f7c8-4c42-8cf0-4be39a9327d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c2:c0:d8:7e:98:21:d4:5d:9c:64:ed:4f:64:
                    54:e7:21:f8:c4:10:03:54:3d:5a:fc:b1:18:46:d2:
                    3c:22:a8:88:31:3d:bc:22:7a:a5:ff:9d:4f:e8:e6:
                    c7:ee:1a:0c:f2:2c:22:5d:c1:47:17:c2:81:2e:ee:
                    3c:8d:da:a6:93:54:e9:00:21:06:fb:94:f7:8c:7c:
                    98:d1:5e:73:18:73:57:4d:82:80:d2:7b:fe:d3:3f:
                    a4:a6:36:cb:9b:a2:02:8b:ca:28:84:22:78:fa:37:
                    d6:96:29:b1:ac:d4:b4:37:dc:06:56:8e:c9:90:8d:
                    9e:c4:4f:97:8b:88:9d:97:e4:ed:67:67:c1:e2:44:
                    75:69:96:04:17:3a:66:bc:46:38:5d:46:d4:c0:17:
                    96:03:ab:c8:d4:f0:fe:d6:dd:b3:fd:a5:26:58:c1:
                    1f:f9:24:2c:37:72:3f:30:50:ac:67:d2:a5:d4:ca:
                    64:51:60:6d:07:b0:ea:d6:45:19:d3:07:e4:74:89:
                    af:d5:00:46:21:bf:1d:39:48:7e:12:fd:b3:1e:4d:
                    c7:c6:08:f2:1c:16:ec:c8:0a:8e:7a:8e:fa:ee:f5:
                    21:4d:4b:03:5a:6a:0d:56:06:18:65:5e:1f:ca:87:
                    c8:9d:3d:63:db:25:fa:b1:d8:78:e7:68:84:7e:60:
                    91:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F5:51:0E:FB:E4:A8:32:AE:76:4C:20:A0:47:A0:DB:D7:D4:F5:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f26ebe9f-58fb-3783-9924-341ab773adc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.144.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:16:7a:55:89:4a:87:1a:7f:8f:6b:b5:7d:1e:d9:2b:68:06:
         2a:91:c4:a5:cb:5c:36:37:47:e3:c6:4c:40:fb:7f:9d:58:da:
         e4:81:0b:a0:d6:3b:a7:8d:60:6f:9b:f3:53:fe:50:d8:41:b0:
         4f:71:6f:29:53:2a:18:54:66:98:2d:d7:78:c4:92:fa:65:97:
         20:e3:4f:ed:8f:16:b5:94:58:e6:ce:2e:af:99:d0:dc:8f:a6:
         cd:d2:c8:15:d6:e8:06:74:51:e3:8c:fe:69:83:8c:73:35:d5:
         48:51:54:24:16:d1:b6:09:03:ed:f8:77:68:ca:e8:82:2b:2e:
         6c:5c:76:38:00:8a:35:db:aa:f1:20:36:9b:9e:3c:5d:c8:4f:
         a8:1f:ad:1c:2f:a7:6c:63:2e:12:62:2c:fa:03:e3:16:e0:a2:
         7b:87:25:d8:8f:59:8e:a2:f7:ed:6b:7e:63:72:81:aa:90:e6:
         ee:4d:c4:67:25:93:fb:c0:3c:9a:73:e3:ae:aa:5f:4d:73:fe:
         66:7d:65:77:b7:d8:36:92:62:a9:f7:b2:bd:52:6b:ce:6a:f0:
         3e:35:67:a5:81:0d:cf:b4:5e:c0:dc:15:04:da:0f:8f:1b:83:
         1f:b0:aa:0f:4f:9e:a1:66:8f:27:a6:0a:ce:7c:71:b6:a6:62:
         fa:cf:f4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 21:30:22 2024 by rpki-client on console-fra.rpki-client.org